Critical severity9.8NVD Advisory· Published Apr 1, 2026· Updated Apr 7, 2026
CVE-2026-31027
CVE-2026-31027
Description
TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste_modules/app.so. The vulnerability occurs because the rootSsid parameter is not properly validated for length, allowing remote attackers to trigger a buffer overflow, potentially leading to arbitrary code execution or denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:o:totolink:a3600r_firmware:5.9c.4959:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/A3600R/rootSsid-setAppEasyWizardConfig.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.